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REMARKS 

The Examiner has rejected Claims 1-63 under 35 U.S.C. 103(a) as being 
unpatentable over Tso et al. (U.S. Patent No. 6,088,803), in view of Fielding et al. 
("Hypertext Transfer Protocol - HTTP/1.1," RFC, June 1999). Applicant respectfully 
disagrees with such rejection, especially in view of the amendments made hereinabove to 
the independent claims. Specifically, applicant has amended the independent claims to at 
least substantially include the subject matter of former dependent Claims 1 1 et al. and 61. 

With respect to a plurality of the Examiner's rejections, the Examiner has cited 
pages 82-83 and 85-86 as page identifiers for "Section 14.27: If-Range" and "Section 
14.35: Range" of the Fielding reference. Applicant respectfully notes that the above 
sections reHed on by the Examiner are actually found on pages 132-133 and 137-139 of 
the Fielding reference. 

With respect to the independent claims, the Examiner has relied on Col. 3, lines 
10-54 and Col. 5, lines 1-43 from the Tso reference to make a prior art showing of 
applicant's claimed "receiving a request from the computer malware scanning software 
for data comprising a randomly accessed portion of the requested file" (see the same or 
similar, but not necessarily identical language in the independent claims). 

Applicant respectfully notes that the above excerpts relied on by the Examiner 
merely teach that "[i]n a typical network transaction, [a] content server... will transmit a 
requested data object as a series of contiguous portions" (Col. 3, lines 14-16). 
Additionally, the above excerpts teach that a "network device. . . withholds a portion (or a 
segment of a portion) of the requested file most-recently received from [the] content 
server. . . and does not transmit that withheld portion [to the client device] until at least 
another similarly-sized portion of the requested file is received" (Col. 3, lines 23-28 - 
emphasis added). Further still, the excerpts teach that a "[v]irus checker. . . performs 
virus checking . . . on the requested file as portions are received from [the] content server" 
(Col. 3, lines 41-44 - emphasis added). Still yet, applicant respectfully asserts that Col., 
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5, lines 1-43, as relied on by the Examiner, merely relate to "virus checking" where 
"checked files and/or results of checks may be advantageously stored in a cache storage" 
(Col. 5, lines 1-3). 

However, merely disclosing a requested data object , as in Tso, fails to meet 
applicant's claimed "receiving a request from the computer malware scanning software 
for data comprising a randomly accessed portion of the requested file " (emphasis 
added), as specifically claimed. Further, simply withholding a most recently received 
portion of a file from being sent to a client until a similarly-sized portion of the file is 
received, in addition to performing virus checking on a requested file as portions of the 
file are received, as taught in Tso, does not even suggest any sort of "randomly accessed 
portion of [a] requested file," let alone teach "receiving a request from the computer 
malware scanning software for data comprising a randomly accessed portion of the 
requested file" (emphasis added), as claimed by applicant. 

Additionally, with respect to the independent claims, the Examiner has relied on 
Pages 132-133, "Section 14.27: If-Range"; and Pages 137-139, "Section 14.35: Range" 
from the Fielding reference to make a prior art showing of applicant's claimed technique 
"wherein the randomly accessed portion of the file is requested utilizing a byte range 
technique" (see the same or similar, but not necessarily identical language in the 
independent claims). 

Applicant respectfully points out that the above reference excerpts relied on by 
the Examiner merely teach that "[t]he If-Range header allows a client to 'short-circuit' 
the second request. . .meaning. . . 'if the entity is unchanged, send me the part(s) that I am 
missing : otherwise, send me the entire new entity ' " in order to "have an up-to-date copy 
of the entire entity in its cache" (Page 132, last two paragraphs - emphasis added). 

Further, the reference excerpts teach that "[b]yte range specifications in HTTP 
apply to the sequence of bytes in the entity-body," and that "[a] byte range operation 
MAY specify a single range of bytes, or a set of ranges within a single entity" (Page 137, 
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paragraphs 3 and 4). The excerpts also teach that "HTTP retrieval requests. . . MAY 
request one or more sub-ranges of the entity, instead of the entire entity, using the Range 
request header, which applies to the entity returned as the result of the request" (Page 
138, last paragraph). 

However, sending missing bytes or an entire entity to a client in order to obtain an 
up-to-date copy of an entire entity, in addition to a byte range operation that specifies 
ranges of bytes, as in Fielding, does not specifically teach a technique "wherein the 
randomly accessed portion of the file is requested utilizing a byte range technique" 
(emphasis added), as claimed by applicant. Nowhere in the above cited excerpts is there 
any mention of a " randomly accessed portion of the file. . . requested utilizing a byte 
range technique" (emphasis added), as claimed by applicant. 

To establish a prima facie case of obviousness, three basic criteria must be met. 
First, there must be some suggestion or motivation, either in the references themselves or 
in the knowledge generally available to one of ordinary skill in the art, to modify the 
reference or to combine reference teachings. Second, there must be a reasonable 
expectation of success. Finally, the prior art reference (or references when combined) 
must teach or suggest all the claim limitations. The teaching or suggestion to make the 
claimed combination and the reasonable expectation of success must both be found in the 
prior art and not based on applicant's disclosure. In re Vaeck947 F.2d 488, 20 USPQ2d 
1438(Fed.Cir.l991). 

Applicant respectfully asserts that at least the third element of the prima facie 
case of obviousness has not been met, since the prior art references, as relied upon by the 
Examiner, fail to teach or suggest all of the claim limitations, as noted above. 
Nevertheless, despite such paramount deficiencies and in the spirit of expediting the 
prosecution of the present application, applicant has incorporated the subject matter of 
former Claims 1 1 et al. and 61 into the independent claims. 
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With respect to the subject matter of former Claim 1 1 et al. (now at least 
substantially incorporated into the independent claims), the Examiner has relied on Pages 
132-133, "Section 14.27: If-Range"; and Pages 137-139, "Section 14.35: Range" from 
the Fielding reference to make a prior art showing of applicant's claimed "tracking 
information associated with each transfer of a requested portion of the file; and 
determining whether information associated with the file has changed" (as amended). 

Applicant again respectfully notes that the above reference excerpts relied on by 
the Examiner merely teach that "if the entity is unchanged, send me the partfs) that I am 
missing : otherwise, send me the entire new entity " in order to "have an up-to-date copy 
of the entire entity in its cache" (Page 132, last two paragraphs - emphasis added). 
Further, the reference excerpts teach that "[a] byte range operation MAY specify a single 
range of bytes, or a set of ranges within a single entity" (Page 137, paragraphs 3 and 4). 
The excerpts also teach that "HTTP retrieval requests. . . MAY request one or more sub- 
ranges of the entity, instead of the entire entity" (Page 138, last paragraph). 

However, sending missing bytes or an entire entity to a client in order to obtain an 
up-to-date copy of an entire entity, in addition to a byte range operation that specifies 
ranges of bytes, as in Fielding, does not teach " tracking information associated with each 
transfer of a requested portion of the file; and determining whether information 
associated with the file has changed" (emphasis added), as claimed by applicant. 
Applicant respectfully emphasizes that merely updating an entity does not teach "tracking 
information associated with each transfer of a requested portion of the file" (emphasis 
added), as claimed by applicant. 

Further, with respect to the subject matter of former Claim 61 (now at least 
substantially incorporated into the independent claims), the Examiner has relied on Pages 
132-133, "Section 14.27: If-Range"; and Pages 137-139, "Section 14.35: Range" from 
the Fielding reference to make a prior art showing of applicant's claimed technique 
"wherein the byte range technique turns a serial download mechanism into a random 
access file mechanism." 



A/72206527.1 



Page 16 of 22 



Appl.No. 10/612,996 

Reply to Office action of July 31, 2007 

Applicant yet again respectfully notes that the above reference excerpts relied on 
by the Examiner merely teach that "if the entity is unchanged, send me the part(s) that I 
am missing; otherwise, send me the entire new entity," in order to "have an up-to-date 
copy of the entire entity in its cache" (Page 132, last two paragraphs - emphasis added). 
Further, the reference excerpts teach that "[a] byte range operation MAY specify a single 
range of bytes, or a set of ranges within a single entity" (Page 137, paragraphs 3 and 4). 

However, sending missing bytes or an entire entity to a client in order to obtain an 
up-to-date copy of an entire entity, in addition to specifying an HTTP retrieval request of 
one or more sub-ranges of an entity, as disclosed in Fielding, does not teach a technique 
"wherein the byte range technique turns a serial download mechanism into a random 
access file mechanism " (emphasis added), as claimed by applicant. More specifically, 
nowhere in the above excerpts is a "random access file mechanism" even mentioned, as 
applicant claims. 

Thus, since at least the third element of the prima facie case of obviousness has 
not been met, a notice of allowance or a proper prior art showing of all of the claim 
limitations, in the context of the remaining elements, is respectfully requested. 

Applicant further notes that the prior art is also deficient with respect to the 
dependent claims. For example, with respect to Claim 8 et al. and Claim 9 et al., the 
Examiner has relied on Pages 132-133, "Section 14.27: If-Range"; and Pages 137-139, 
"Section 14.35: Range" from the Fielding reference to make a prior art showing of 
applicant's claimed "determining that the requested portion of the requested file cannot 
be transferred; and transferring an entirety of the requested file and supplying the . 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file" (see Claim 8 et al.) and applicant's claimed 
technique "wherein the requested portion of the requested file cannot be transferred 
because the requested portion of the requested file cannot be randomly accessed" (see 
Claim 9 et al). 
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As mentioned above, applicant again respectfully notes that the above reference 
excerpts relied on by the Examiner merely teach that "if the entity is unchanged, send me 
the part(s) that I am missing; otherwise, send me the entire new entity," in order to "have 
an up-to-date copy of the entire entity in its cache" (Page 132, last two paragraphs - 
emphasis added). Further, the reference excerpts teach that "[a] byte range operation 
MAY specify a single range of bytes, or a set of ranges within a single entity" (Page 137, 
paragraphs 3 and 4). The excerpts also teach that "HTTP retrieval requests. . . MAY 
request one or more sub-ranges of the entity, instead of the entire entity, using the Range 
request header, which applies to the entity returned as the result of the request" (Page 
138, last paragraph). 

However, sending the entirety of an entity if the entity is changed, as taught by 
Fielding, fails to teach " determining that the requested portion of the requested file 
cannot be transferred " (emphasis added), as claimed by applicant. Additionally, sending 
missing parts of an entity if the entity is unchanged, in addition to requesting one or more 
sub-ranges of the entity instead of the entire entity, as also taught in Fielding, does not 
teach a technique "wherein the requested portion of the requested file cannot be 
transferred because the requested portion of the requested file cannot be randomly 
accessed " (emphasis added), as claimed by applicant. More specifically, the above 
excerpts fail to disclose a situation "wherein... the requested portion of the requested file 
cannot be randomly accessed " (emphasis added), as claimed by applicant. 

Further, with respect to Claims 62 and 63, the Examiner has relied on Col. 3, lines 
10-54 and Col. 5, lines 1-43 from the Tso reference to make a prior art showing of 
applicant's claimed technique "wherein the data associated with the request from the 
computer malware scanning software comprises a plurality of randomly accessed 
portions of the requested file" (see Claim 62, as amended) and "wherein the plurality of 
randomly accessed portions of the requested file are read in a random order" (see Claim 
63, as amended). Applicant respectfixUy notes that the Examiner cites Claim 64 but relies 
on the language from Claim 63 in the aforementioned rejection. 
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Applicant respectfully notes that the above excerpts relied on by the Examiner 
merely teach that "[i]n a typical network transaction, [a] content server. . . will transmit a 
requested data object as a series of contiguous portions" (Col. 3, lines 14-16). 
Additionally, the above excerpts teach that a "network device. . . withholds a portion (or a 
segment of a portion) of the requested file most-recently received from [the] content 
server. . . and does not transmit that withheld portion [to the client device] until at least 
another similarly-sized portion of the requested file is received" (Col. 3, lines 23-28 - 
emphasis added). Further still, the excerpts teach that a "[v]irus checker. . . performs 
virus checking . . . on the requested file as portions are received fi-om [the] content server" 
(Col. 3, lines 41-44). Still yet, applicant respectfully asserts that Col., 5, lines 1-43, as 
relied on by the Examiner, merely relate to "virus checking" where "checked files and/or 
results of checks may be advantageously stored in a cache storage" (Col. 5, lines 1-3). 

However, merely withholding the most recently received portion of a file from 
being sent to a client until a similarly-sized portion of the file is received, in addition to 
performing virus checking on a requested file as portions of the file are received, as in 
Tso, does not specifically teach a "plurality of randomly accessed portions of the 
requested file," much less a technique "wherein the data associated with the request from 
the computer malware scanning software comprises a plurality of randomly accessed 
portions of the requested file" (Claim 65, as amended- emphasis added), and a technique 
"wherein the plurality of randomly accessed portions of the requested file are read in a 
random order " (Claim 63, as amended - emphasis added), as claimed by applicant. 

Further still, the Examiner has rejected Claim 64 under 35 U.S.C. 103(a) as being 
unpatentable over Tso et al., in view of Fielding et al., and further in view of Guthrie 
(U.S. Patent No. 6,266,681). Specifically, the Examiner has relied on Col. 2, lines 22-64 
and Col. 3, lines 31-42 from the Guthrie reference to make a prior art showing of 
applicant's claimed technique "wherein a system call handler intercepts system level calls 
made by the computer malware scanning software and simulates system level fiinction 
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calls utilized by the computer malware scanning software to determine whether the file 
includes the computer malware." 

Applicant respectfully notes that the above reference excerpts relied on by the 
Examiner merely teach "the use of an intermediary machine between the client machine 
and other machines on the WEB /' and that an "HTTP-request message. . . is sent first to a 
proxy server machine. . . which then forwards the HTTP-request message. . . as message. . . 
to the server machine" (Col. 2, lines 24-38 - emphasis added). Further, the above 
excerpts teach that "the proxy server machine may be specially programmed to detect 
viruses that may be sent in an HTTP-response message" (Col. 2, lines 43-45). 

In addition, the above excerpts teach that "the injection mechanism installs 
interceptor code as a proxy server to intercept HTTP messages between client code and 
server code," and that "[t]he interceptor code monitors HTTP messages sent from the 
client and is responsible for injecting code into HTML documents that are sent from 
servers to the client" (Col, 3, lines 3 1-36 - emphasis added). Further, the excerpts teach 
that "[t]he injected code, when executed by a client browser, conditionally inserts HTML 
code into the HTML document, which is then used by the browser to generate a new 
component" (Col. 3, lines 36-39). 

However, simply installing interceptor code as a proxy server which monitors 
HTTP ^messages sent from the client and inserts code into HTML documents sent to the 
client, as disclosed in Guthrie, fails to teach a technique "wherein a system call handler 
intercepts system level calls made by the computer malware scanning software and 
simulates system level function calls utilized by the computer malware scanning software 
to determine whether the file includes the computer malware" (emphasis added), as 
claimed by applicant. 

Again, since at least the third element of the prima facie case of obviousness has 
not been met, reconsideration of this application and a notice of allowance or a proper 
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prior art showing of aU of the claim limitations, in the context of the remaining elements, 
is respectfully requested. 
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Additional Fees; 

The Commissioner is hereby authorized to charge any insufficient fees or credit any 
overpayment associated with this application to Deposit Account No. 50-4047 
(19903.0043). 

Conclusion 

In view of the foregoing, all of the Examiner*s rejections to the claims are 
believed to be overcome. The Applicants respectfully request reconsideration and 
issuance of a Notice of Allowance for all the claims remaining in the application. Should 
the Examiner feel further communication would facilitate prosecution, he is urged to call 
the undersigned at the phone number provided below. 



Dated: September 13, 2007 



Bingham McCutchen, LLP 
2020 K Street, N.W. 
Washington, D.C. 20006 
Telephone (202) 373-6000 
Facsimile (202)373-6001 



Respectfully Submitted, 




Michael A, Schwartz 
Reg. No. 40,161 
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